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INVENTION DISCLOSURE 

PDNO I CT^\ ^E>0-'^ DATERCVD Redacted ATTORNEY fyj 

' Jnl^c&-ofTS' The information oontainad in this dooumen l is COMPANY CONFIDENTIAL and may not be Qfisg^osed to others ^^^J^^ 
aiSoi S^SnrSS/Dsa/B to the HP Legal Departmam as soon as possible. No paterii protection is possible untH a patent appSoaton ts 
authOTized, prepared, and submMed to the GovemmertL ■ 



Descriptive Title of Invention: HTTP CooVae Proxy 



Kame of Project Universal Session Manager 



Product Name or Number. Total-e-Mobile 




Was a description of the invention pu blished, or are you pianning to pubFish? If so. the date(s) and pubrication(s): 
Redacted 

Was a oroduct including the invention announced, offered for sale. sold, or is such activity proposed? if so. the date(s) and location(s): 
Redacted 

Was the invention disdosed to anyone outside of HP. or will such disclosure occur? If so, the date(s) and name[s): 
Redacted 

If .ny nf fhP above sSuB^ons occuT wghin 3 months cbB your P attomey o r me lega/ Depai^enf now at 1^93^919 or 970-89^919. 



Was the invention described in a lab book or other record? If so. please identify (lab book #. eto.) 
Redacted 



Was the invention built or tested? If so. the date: 
Redacted 



Was this invention made under a government contract? If so. the agency and contract number 
Redacted 



Description of Invention: Please pre serve aff records of the invention and attach additional pages for the following. Each addHional page should 
be signed and dated by the inventor(s) and wnness(es). 

A. Description of the construction and operation of the invention Qnciude appropriate schematic, block. & timing diagrams; drawings; samples; 
graphs; flowcharts; computer listings; test results; ete.) 

B. Advantages of the invention over what has been done before. 

D oS^t^in^^ ^^^^ available, attach copies of product literature, technical articles, patents, e tc.). 

signature of lnve ntor(s): Pursuant to my (our) employront mr^p^nt. I (we) submit this disclosure on this date: [ Redacted 1- 



Redacted John Mazzitelll 



Redacted 



HP Bluestone 



Employee No. Name 



Telnet Mailstop 



Entity & Lab Name 



Employee No. Name 



Signature 



Telnet Mailstop 



Entity & 1-ab Name 



Employee No. Name 



Signature 



Telnet Mailstop 



Entity & Lab Name 



Employee No. ^^ame^^^ four/nvenfo/s. include addifh^alh^^ on another copy of this /b^'anrf attadh to this document) 



Telnet Mailstop 



Entity & Lab Name 



Redacted 
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Qinnahire of WitneSSfeS): Please try to obtain the signature of the personis) to whom invention was first disclosed.) 

tkI inv^ntinn was first exDlained to. and understood by. me (us) on this date: [ Redac ted ] 




FuBName Signature _ Date of Stgnatum 
V,N(Cer^ ^C^l4ee.-sr f=^i- D ^YSt^'^'"^ Redacted 


Signafiie Date of Sgrature 

rUU Noine 


Inventor & Home Address Information: fir more than tour inventors, include addl information on a copy of tfifs form & a(f3ch to thts document) 


Inventor's Fun Name 

John Joseph MazzfteUi . — — 


Street 

Redacted , „ — — 


— State Zip 

Cit/ 

Redacted ' Redacted 


Do you have a Residential P.O. Aoaress,' H.O. bWJX '-'ly 


Greeted as fnictojame.midcfle name, efc.) Tnited States of America 


Inventor's Fun Name 


Street 




~ ~~ '' State zip 

City 




Do you have a Residential P.O. Address? P.O. BOX City State Tip 




Greeted as fnicJtname, rrvddle name, etc.) Citizenship 




Invenlof's Full Name 




Street 




. • — ■ state op 

City 


DoyouhaveaResidentialP-OAddress? P.O.BOX City State Zip 


Greeted as (nickname, middle name, etc.) Citizenship 


IfTvento'sFuIlName 


Street 




' ~~ " Stete ap 

City 

Do you have a Residential P.O. Address? P.O BOX C-fty State Zip 
Greeted as (rvckname, rrvddie name, etc.) ^"'^^ ^ 



Redacted 
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"Description of Invention: Please preserve all reoords of the invention and attach additional pages for the following. Each additional page should 

be signed and dated by the inventor(s) and wjtnass(es), ^ 

Description of the construction and operation of the invention Ondude appropriate schematic, block. & timing diagrams; drawings; samples; 
graphs; flowcharts; computer Fistings; test results; etc.) 

The HTTP Cookie Proxy is a component that is housed inside of the Universal Session Manager product which sits between a remote dient 
device and a web server. The Universal Session Manager and its internal HTTP Cookie Proxy component is currently implemented as a 
customized listener that plugs into the HP Bluestone Universal Ustener Frameworic (ULF). The algorithm is as follows: 

1) Accept HTTP requests from the dient device (e.g.» a WAP phone) 

2) Extracts a unique cfient identifier from that HTTP request that uniquely identifies the remote dient 

3) Adds any cookies belonging to tiiat dient to the request via an HTTP cookie header. 

4) Forwards the request (with the new HTTP cookie headers) to a web server. 

5) When the web sen/er returns the HTTP response, the component will parse that response and extrad all HTTP set-cookie headers. If any 
set-cookie headers are found, those cookies are stored in a cookie storage area for later retrieval when tiie dient submits future HTTP requests 
(i.e. used in step 3). 

6) The HTTP Cookie Proxy passes the response unaltered back to the dient 

Other ttian adding cookie headers to ^e fonvarded HTTP request, no other modifications are made to the request and, no modifications are 
^Q^^ 0^ v^^eb server's HTTP response. By default, the cookies are stored in-process; ttnat is to say, they are stored in tiie same Java 
Wtual Machine memory space as the HTTP Cookie Proxy. It is conceivable that you might want to store this cookie information in persistent 
storage (Uke a file system or database) for better fault tolerance. The HTTP Cookie Proxy has, therefore, been designed to aflow for an 
implementation that does these things to plug in seamlessly. 

FIGURE A. 





WAP 




ULF 




UBS 


Server 


< ► 







FIGURE A shows an example of how the Universal Session Manager (which houses the HTTP Cookie Proxy components) could be used to 
fadlitate requests between a WAP phone and an HP Bluestone Universal Business Server (UBS) appfication. 



Redacted 
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FIGURE B 




FIGURE B illustrates the Request Scenario - that is. the flow diagram that indicates how an HTTP request from a client device flows through 
the HTTP Cookie Proxy to its final destination, that being a web server or application server. 



Redacted 
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B. Advantages of the invention over vy^hat has been done before. 



Without using this HTTP Cookie Proxy, some client devices cannot maintain slate information and Itius could not access certain web and/or 
application servers. The advantage to using this component is that now a device whidi previousty had been unable to effectively use certain 
web and appHcation servers can now do so without failure. Another advantage is that the HTTP Cookie Proxy can be added to an appFication 
deployment without the application developer or the client device knowing that it is involved in the interaction between client and senrer. 
Therefore, it can be added to an existing or future application deployment without requiring additional coding effort to be expended. It snaps in 



Redacted 
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seamlessly and invisibly to the client and server programs. 



C. Problems solved by the invention. 

Some dient devices do not have the capability to store HTTP cookies. This can lead to problems since some web and Appfication Servers pass 
cookies to clients in order to maintain session and state infonnatjon between requests - without the ability to store cookies on a per-cTient basis, 
state and session information cannot be maintained across multiple requests from the same dient The HTTP Cookie Proxy works around this 
problem by providing a mechanism by which the cookie information is no longer required to be stored in the dient device. 



D. Prior solutions and their disadvantages (if available, attach copies of product literature, technical artides, patents, etc.). 

A prior solution would be to force the weh/application server developer to encode the cookie infomnation in the returned anchor and form action 
URLs. The disadvantage to this is that it requires additional work on the application developer to spedfically code their appFications to do tiiis 
additional, spedalized handling for the specific devices tinat cannot handle cookies. Another disadvantage is that the URLs themselves may 
grow too long in lengtii, depending on how the cookie information is encoded on the URL Some devices may not or can not display or accept 
URL strings longer tiian a certain length. If that lengtii is exceeded, tiie dient will again be rendered useless with respect to its ability to interact 
with the web or appfication server. 



Redacted 



